Biconomy Hyphen 2.0 contest - cryptphi's results

Next-Gen Multichain Relayer Protocol.

General Information

Platform: Code4rena

Start Date: 10/03/2022

Pot Size: $75,000 USDT

Total HM: 25

Participants: 54

Period: 7 days

Judge: pauliax

Total Solo HM: 10

Id: 97

League: ETH

Biconomy

Findings Distribution

Researcher Performance

Rank: 48/54

Findings: 1

Award: $118.98

🌟 Selected for report: 0

🚀 Solo Findings: 0

Awards

118.9792 USDT - $118.98

Labels

bug
QA (Quality Assurance)

External Links

Title

Missing zero address check

Vulnerability details

Impact

LiquidityPool.withdrawErc20GasFee function has a missing zero address check. There is no zero address check to ensure the ERC Gas Fee is not sent to 0 address.

Proof of Concept

https://github.com/code-423n4/2022-03-biconomy/blob/main/contracts/hyphen/LiquidityPool.sol#L372-L381

Tools Used

Manual review on VSCode

Add require check for the address passed in withdrawErc20GasFee()

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter